Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/TIBa7y1gEIPV4fz7HVwwvYcK1S0.roa
File: TIBa7y1gEIPV4fz7HVwwvYcK1S0.roa (raw, json)
Hash identifier: 2YluJo4EKD2F1vrpjjHeIOfBXFYIt5WeIzGrmRAo5cM=
Subject key identifier: 4C:80:5A:EF:2D:60:10:83:D5:E1:FC:FB:1D:5C:30:BD:87:0A:D5:2D
Certificate issuer: /CN=e5e03354666c4cb2abfd51411eca5d524b0d5be5
Certificate serial: 01A14BC35388726A83C3993BA059DB2E42F2
Authority key identifier: E5:E0:33:54:66:6C:4C:B2:AB:FD:51:41:1E:CA:5D:52:4B:0D:5B:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/TIBa7y1gEIPV4fz7HVwwvYcK1S0.roa
Signing time: Sat 17 Oct 2026 21:27:34 +0000
ROA not before: Sat 17 Oct 2026 21:27:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44547
IP address blocks: 187.7.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4b:c3:53:88:72:6a:83:c3:99:3b:a0:59:db:2e:42:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5e03354666c4cb2abfd51411eca5d524b0d5be5
Validity
Not Before: Oct 17 21:27:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4c805aef2d601083d5e1fcfb1d5c30bd870ad52d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:0c:3d:0f:c6:12:4d:88:db:99:b9:25:cb:78:
6d:4a:62:71:de:f1:4a:26:49:fd:18:87:d1:db:c2:
77:0c:cc:de:73:f5:33:b0:31:a8:59:fa:39:e1:2c:
88:b9:74:73:c3:04:51:94:7e:0e:fa:57:ef:85:7a:
32:87:b6:7d:41:85:77:ba:a0:73:8c:10:6c:b9:22:
30:70:8b:e2:71:77:71:21:65:d7:5b:3c:6f:e4:2c:
28:8f:65:72:c8:72:af:d3:5b:27:e4:d0:22:be:a1:
c3:fe:cf:43:e6:a6:0b:65:e7:f3:1a:e5:27:06:01:
6f:18:7a:fc:88:c0:60:0a:e9:3c:a2:37:fa:cf:16:
d1:7e:e9:df:92:09:72:9a:eb:4f:05:31:7f:ba:03:
bc:95:b1:5a:a3:5a:7f:25:1f:92:58:52:10:8d:87:
e5:c6:bf:1b:a5:de:35:80:ca:45:6b:1b:93:0d:0d:
13:58:6a:da:3c:05:92:c5:c0:99:a0:db:7e:cb:59:
2b:35:25:a8:83:14:7b:1e:8a:1e:73:de:1e:ce:b1:
a8:dd:77:96:1a:f9:93:89:60:a4:ae:a1:1b:bb:3b:
a0:8f:09:a6:80:34:e3:5a:64:d6:9e:ad:81:c3:05:
36:64:b1:15:06:f3:d5:a8:06:90:a2:0d:bb:d5:04:
31:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:80:5A:EF:2D:60:10:83:D5:E1:FC:FB:1D:5C:30:BD:87:0A:D5:2D
X509v3 Authority Key Identifier:
keyid:E5:E0:33:54:66:6C:4C:B2:AB:FD:51:41:1E:CA:5D:52:4B:0D:5B:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/TIBa7y1gEIPV4fz7HVwwvYcK1S0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.7.204.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:6a:f2:7d:3d:b3:26:03:d9:01:17:3c:21:13:bd:55:6b:d2:
08:65:c1:b0:89:ba:6c:e8:87:77:71:9f:87:04:b7:ff:13:f5:
60:c3:4d:e5:d9:67:f3:2c:4f:24:e0:aa:bb:f7:f5:f3:9f:2a:
ea:d3:a8:09:40:73:82:44:62:af:64:62:c7:42:75:4e:1c:7d:
29:03:16:81:eb:10:24:27:2f:fd:e7:65:3f:f2:51:30:33:6a:
76:a3:92:5d:96:99:4a:33:4d:71:ef:69:e1:42:15:96:70:32:
fb:b0:4b:06:fa:44:b9:bc:1b:b5:69:c3:4e:52:39:00:41:62:
3b:7f:86:b7:bb:36:57:73:fa:0e:09:8f:0d:0e:b9:5a:42:79:
4e:ec:04:9f:bd:1e:68:da:d5:6b:41:64:1f:c1:16:1a:0f:e4:
36:31:d6:69:d1:58:6e:33:f5:67:10:96:de:c5:1a:36:f8:e4:
df:89:79:2a:d3:9d:4b:ab:c1:ce:72:d2:27:09:97:2a:81:ba:
b4:f7:d5:84:7c:a2:3a:aa:e8:f7:3a:2c:b1:c2:8b:bf:6e:56:
4c:06:23:6c:73:b1:fd:83:c1:6d:16:c3:c9:e5:a1:67:03:2f:
44:07:2a:3c:a7:4d:23:82:77:5f:3b:51:e0:78:a9:e3:82:fb:
e8:39:a0:7a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaFLw1OIcmqDw5k7oFnbLkLyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1ZTAzMzU0NjY2YzRjYjJhYmZkNTE0MTFlY2E1ZDUyNGIw
ZDViZTUwHhcNMjYxMDE3MjEyNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YzgwNWFlZjJkNjAxMDgzZDVlMWZjZmIxZDVjMzBiZDg3MGFkNTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigw9D8YSTYjbmbkly3htSmJx3vFK
Jkn9GIfR28J3DMzec/UzsDGoWfo54SyIuXRzwwRRlH4O+lfvhXoyh7Z9QYV3uqBz
jBBsuSIwcIvicXdxIWXXWzxv5Cwoj2VyyHKv01sn5NAivqHD/s9D5qYLZefzGuUn
BgFvGHr8iMBgCuk8ojf6zxbRfunfkglymutPBTF/ugO8lbFao1p/JR+SWFIQjYfl
xr8bpd41gMpFaxuTDQ0TWGraPAWSxcCZoNt+y1krNSWogxR7Hooec94ezrGo3XeW
GvmTiWCkrqEbuzugjwmmgDTjWmTWnq2BwwU2ZLEVBvPVqAaQog271QQxEwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEyAWu8tYBCD1eH8+x1cML2HCtUtMB8GA1UdIwQY
MBaAFOXgM1RmbEyyq/1RQR7KXVJLDVvlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWVBelZHWnNUTEtyX1ZGQkhzcGRVa3NOVy1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS85YjYyNWQtMGI2Mi00NWQ5LTk5ZWYt
NjBmYjBmOTE5OTdlLzEvVElCYTd5MWdFSVBWNGZ6N0hWd3d2WWNLMVMwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS85YjYyNWQtMGI2Mi00NWQ5LTk5ZWYtNjBmYjBmOTE5OTdl
LzEvNWVBelZHWnNUTEtyX1ZGQkhzcGRVa3NOVy1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuwfMMA0G
CSqGSIb3DQEBCwUAA4IBAQA/avJ9PbMmA9kBFzwhE71Va9IIZcGwibps6Id3cZ+H
BLf/E/Vgw03l2WfzLE8k4Kq79/Xznyrq06gJQHOCRGKvZGLHQnVOHH0pAxaB6xAk
Jy/952U/8lEwM2p2o5JdlplKM01x72nhQhWWcDL7sEsG+kS5vBu1acNOUjkAQWI7
f4a3uzZXc/oOCY8NDrlaQnlO7ASfvR5o2tVrQWQfwRYaD+Q2MdZp0VhuM/VnEJbe
xRo2+OTfiXkq051Lq8HOctInCZcqgbq099WEfKI6quj3Oiyxwou/blZMBiNsc7H9
g8FtFsPJ5aFnAy9EByo8p00jgndfO1HgeKnjgvvoOaB6
-----END CERTIFICATE-----
Generated at Tue Oct 20 20:44:39 2026 by rpki-client